Electrical Engineering and Computer Science

DCO > Policies for EECS > Security

Printers

  • Any printer connected to the EECS network, needs to be registered and configured by a DCO member (or one notified). The printer needs to be password protected.
  • Any sensitive data as defined by SPG ?? printed to an EECS private printer, needs to be picked up immediately. No sensitive data shall be left on any printer.
  • No sensitive data as defined by SPG ?? shall be printed on a public printer.

    Machines

  • Any machine connected to the EECS network, must have the latest security patches applied, a secure root/admistrator password.
  • If a machine connected to the EECS network is compromised, DCO will follow up and either DCO or the machine owner will do what is necessary to eliminate the vulnerability.
  • The machine owner of any machine connected to the EECS network will provide DCO with root access. Exceptions will be personally owned machines.
  • Machines that store sensitive data as defined by SPG ?? will be secured by a firewall and access restricted to only a group of necessary individuals and machines that need access.

    Other

  • Passwords created will be secure and not shared with others.
  • Sensitive data as defined by SPG ?? will not be left in open offices or in printers.
  • No sensitive data as defined by SPG ?? will be emailed to someone without a compliant email server.
  • A staff or faculty with sensitive data as defined by SPG ?? stored in their office shall make sure the doors will be shut and lock when leaving the office. This includes filing cabinets and desk drawers.